首页 > 最新文献

2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)最新文献

英文 中文
Bad Smells in Industrial Automation: Sniffing out Feature Envy 工业自动化中的不良气味:嗅出功能嫉妒
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00061
Lisa Sonnleithner, Rick Rabiser, Alois Zoitl
Bad Smells are sub-optimal software structures or patterns. They can obstruct the understandability of a software system and cause maintenance issues. As a result, it is critical to avoid Bad Smells. While the subject is well-researched in software engineering, it remains an unresolved issue in industrial automation, e.g., when developing control software in the context of a Cyber-Physical Production System (CPPS). In this short paper, we present possible detection methods for Feature Envy, a smell that indicates bad modularization of a software system. We explain how these methods can be applied to analyze control software developed in IEC 61499. We present first results as well as next steps.
不良气味是次优的软件结构或模式。它们会阻碍软件系统的可理解性,并导致维护问题。因此,避免难闻的气味是至关重要的。虽然这个主题在软件工程中得到了很好的研究,但它在工业自动化中仍然是一个未解决的问题,例如,在网络物理生产系统(CPPS)的背景下开发控制软件时。在这篇短文中,我们提出了特征嫉妒的可能检测方法,特征嫉妒是一种表明软件系统模块化不良的气味。我们解释了这些方法如何应用于分析IEC 61499中开发的控制软件。我们提出初步结果以及下一步。
{"title":"Bad Smells in Industrial Automation: Sniffing out Feature Envy","authors":"Lisa Sonnleithner, Rick Rabiser, Alois Zoitl","doi":"10.1109/SEAA56994.2022.00061","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00061","url":null,"abstract":"Bad Smells are sub-optimal software structures or patterns. They can obstruct the understandability of a software system and cause maintenance issues. As a result, it is critical to avoid Bad Smells. While the subject is well-researched in software engineering, it remains an unresolved issue in industrial automation, e.g., when developing control software in the context of a Cyber-Physical Production System (CPPS). In this short paper, we present possible detection methods for Feature Envy, a smell that indicates bad modularization of a software system. We explain how these methods can be applied to analyze control software developed in IEC 61499. We present first results as well as next steps.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114826407","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
A Mapping Study of Security Vulnerability Detection Approaches for Web Applications Web应用安全漏洞检测方法的映射研究
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00081
K. Rahman, Clemente Izurieta
For the last few decades, the number of security vulnerabilities has been increasing with the development of web applications. The domain of Web Applications is evolving. As a result, many empirical studies have been carried out to address different security vulnerabilities. However, an analysis of existing studies is needed before developing new security vulnerability testing techniques. We perform a systematic mapping study documenting state-of-the-art empirical research in web application security vulnerability detection. The aim is to describe a roadmap for synthesizing the documented empirical research. Existing research and literature have been reviewed using a systematic mapping study. Our study reports on work dating from 2001 to 2021. The initial search retrieved 150 papers from the IEEE Xplore and ACM Digital Libraries, of which 76 were added to the study. A classification scheme is derived based on the primary studies. The study demonstrates that vulnerability detection in web applications is an ongoing field of research and that the number of publications is increasing. Our study helps illuminate research areas that need more consideration.
在过去的几十年里,随着web应用程序的发展,安全漏洞的数量一直在增加。Web应用领域正在不断发展。因此,针对不同的安全漏洞进行了许多实证研究。然而,在开发新的安全漏洞测试技术之前,需要对现有研究进行分析。我们在web应用程序安全漏洞检测方面进行了系统的映射研究,记录了最新的实证研究。目的是描述一个路线图,以综合文献的实证研究。现有的研究和文献已经使用系统的地图研究进行了审查。我们的研究报告了2001年至2021年的工作情况。最初的搜索从IEEE explore和ACM数字图书馆中检索了150篇论文,其中76篇被添加到研究中。在初步研究的基础上,提出了一种分类方案。该研究表明,web应用程序中的漏洞检测是一个正在进行的研究领域,并且出版物的数量正在增加。我们的研究有助于阐明需要更多考虑的研究领域。
{"title":"A Mapping Study of Security Vulnerability Detection Approaches for Web Applications","authors":"K. Rahman, Clemente Izurieta","doi":"10.1109/SEAA56994.2022.00081","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00081","url":null,"abstract":"For the last few decades, the number of security vulnerabilities has been increasing with the development of web applications. The domain of Web Applications is evolving. As a result, many empirical studies have been carried out to address different security vulnerabilities. However, an analysis of existing studies is needed before developing new security vulnerability testing techniques. We perform a systematic mapping study documenting state-of-the-art empirical research in web application security vulnerability detection. The aim is to describe a roadmap for synthesizing the documented empirical research. Existing research and literature have been reviewed using a systematic mapping study. Our study reports on work dating from 2001 to 2021. The initial search retrieved 150 papers from the IEEE Xplore and ACM Digital Libraries, of which 76 were added to the study. A classification scheme is derived based on the primary studies. The study demonstrates that vulnerability detection in web applications is an ongoing field of research and that the number of publications is increasing. Our study helps illuminate research areas that need more consideration.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"46 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126598541","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Risk and Engineering Knowledge Integration in Cyber-physical Production Systems Engineering 信息物理生产系统工程中的风险与工程知识集成
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00060
Felix Rinker, Kristof Meixner, S. Kropatschek, Elmar Kiesling, S. Biffl
In agile Cyber-physical Production System (CPPS) engineering, multi-disciplinary teams work concurrently and iteratively on various CPPS engineering artifacts, based on engineering models and Product-Process-Resource (PPR) knowledge, to design and build a production system. However, in such settings it is difficult to keep track of (i) the effects of changes across engineering disciplines, and (ii) their implications on risks to engineering quality, represented in Failure Mode and Effects Analysis (FMEA). To tackle these challenges and systematically co-evolve FMEA and PPR models, requires propagating and validating changes across engineering and FMEA artifacts. To this end, we design and evaluate a Multi-view FMEA +PPR (MvFMEA+PPR) meta-model to represent relationships between FMEA elements and CPPS engineering assets and trace their change states and dependencies in the design and validation lifecycle. We evaluate the MvFMEA + PPR meta-model in a feasibility study on the quality of a screwing process from automotive production. The study results indicate the MvFMEA + PPR meta-model to be more effective than alternative traditional approaches.
在敏捷网络物理生产系统(CPPS)工程中,多学科团队基于工程模型和产品过程资源(PPR)知识,对各种CPPS工程工件进行并行迭代工作,以设计和构建生产系统。然而,在这种情况下,很难跟踪(i)跨工程学科的变化的影响,以及(ii)它们对工程质量风险的影响,在失效模式和影响分析(FMEA)中表示。为了应对这些挑战并系统地共同发展FMEA和PPR模型,需要在工程和FMEA工件之间传播和验证更改。为此,我们设计并评估了一个多视图FMEA+PPR (MvFMEA+PPR)元模型,以表示FMEA元素与CPPS工程资产之间的关系,并跟踪它们在设计和验证生命周期中的变化状态和依赖关系。我们在汽车生产螺纹加工质量可行性研究中对MvFMEA + PPR元模型进行了评价。研究结果表明,MvFMEA + PPR元模型比其他传统方法更有效。
{"title":"Risk and Engineering Knowledge Integration in Cyber-physical Production Systems Engineering","authors":"Felix Rinker, Kristof Meixner, S. Kropatschek, Elmar Kiesling, S. Biffl","doi":"10.1109/SEAA56994.2022.00060","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00060","url":null,"abstract":"In agile Cyber-physical Production System (CPPS) engineering, multi-disciplinary teams work concurrently and iteratively on various CPPS engineering artifacts, based on engineering models and Product-Process-Resource (PPR) knowledge, to design and build a production system. However, in such settings it is difficult to keep track of (i) the effects of changes across engineering disciplines, and (ii) their implications on risks to engineering quality, represented in Failure Mode and Effects Analysis (FMEA). To tackle these challenges and systematically co-evolve FMEA and PPR models, requires propagating and validating changes across engineering and FMEA artifacts. To this end, we design and evaluate a Multi-view FMEA +PPR (MvFMEA+PPR) meta-model to represent relationships between FMEA elements and CPPS engineering assets and trace their change states and dependencies in the design and validation lifecycle. We evaluate the MvFMEA + PPR meta-model in a feasibility study on the quality of a screwing process from automotive production. The study results indicate the MvFMEA + PPR meta-model to be more effective than alternative traditional approaches.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126604335","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Model-Driven optimization: Generating Smart Mutation Operators for Multi-Objective Problems 模型驱动优化:多目标问题的智能变异算子生成
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00068
Niels van Harten, C. Damasceno, D. Strüber
In search-based software engineering (SBSE), the choice of search operators can significantly impact the quality of the obtained solutions and the efficiency of the search. Recent work in the context of combining SBSE with model-driven engineering has investigated the idea of automatically generating smart search operators for the case at hand. While showing improvements, this previous work focused on single-objective optimization, a restriction that prohibits a broader use for many SBSE scenarios. Furthermore, since it did not allow users to customize the generation, it could miss out on useful domain knowledge that may further improve the quality of the generated operators. To address these issues, we propose a customizable framework for generating mutation operators for multi-objective problems. It generates mutation operators in the form of model transformations that can modify solutions represented as instances of the given problem meta-model. To this end, we extend an existing framework to support multi-objective problems as well as customization based on domain knowledge, including the capability to specify manual “baseline” operators that are refined during the operator generation. Our evaluation based on the Next Release Problem shows that the automated generation of mutation operators and user-provided domain knowledge can improve the performance of the search without sacrificing the overall result quality.
在基于搜索的软件工程(SBSE)中,搜索算子的选择对得到的解的质量和搜索效率有很大的影响。最近在将SBSE与模型驱动工程相结合的背景下,研究了为手头的情况自动生成智能搜索操作符的想法。虽然显示了改进,但以前的工作主要集中在单目标优化上,这是一个限制,禁止在许多SBSE场景中更广泛地使用。此外,由于它不允许用户自定义生成,它可能会错过有用的领域知识,这些知识可能会进一步提高生成操作符的质量。为了解决这些问题,我们提出了一个可定制的框架来生成多目标问题的突变算子。它以模型转换的形式生成突变操作符,可以修改表示为给定问题元模型实例的解决方案。为此,我们扩展了现有的框架,以支持多目标问题以及基于领域知识的定制,包括指定手动“基线”操作符的能力,这些操作符在操作符生成过程中得到改进。我们基于下一个发布问题的评估表明,自动生成突变算子和用户提供的领域知识可以在不牺牲整体结果质量的情况下提高搜索性能。
{"title":"Model-Driven optimization: Generating Smart Mutation Operators for Multi-Objective Problems","authors":"Niels van Harten, C. Damasceno, D. Strüber","doi":"10.1109/SEAA56994.2022.00068","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00068","url":null,"abstract":"In search-based software engineering (SBSE), the choice of search operators can significantly impact the quality of the obtained solutions and the efficiency of the search. Recent work in the context of combining SBSE with model-driven engineering has investigated the idea of automatically generating smart search operators for the case at hand. While showing improvements, this previous work focused on single-objective optimization, a restriction that prohibits a broader use for many SBSE scenarios. Furthermore, since it did not allow users to customize the generation, it could miss out on useful domain knowledge that may further improve the quality of the generated operators. To address these issues, we propose a customizable framework for generating mutation operators for multi-objective problems. It generates mutation operators in the form of model transformations that can modify solutions represented as instances of the given problem meta-model. To this end, we extend an existing framework to support multi-objective problems as well as customization based on domain knowledge, including the capability to specify manual “baseline” operators that are refined during the operator generation. Our evaluation based on the Next Release Problem shows that the automated generation of mutation operators and user-provided domain knowledge can improve the performance of the search without sacrificing the overall result quality.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125176831","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
An Evaluation of Effort-Aware Fine-Grained Just-in-Time Defect Prediction Methods 努力感知的细粒度即时缺陷预测方法的评价
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00040
S. Amasaki, Hirohisa Aman, Tomoyuki Yokogawa
CONTEXT: Software defect prediction (SDP) is an active research topic to support software quality assurance (SQA) activities. It was observed that unsupervised prediction models were often competitive with supervised ones at release-level and change-level defect prediction. Fine-grained just-in-time defect prediction focuses on defective files in a change, rather than the whole change. A recent study showed that the fine-grained just-in-time defect prediction was cost-effective in terms of effort-aware performance measures. Those studies did not explore the effectiveness of supervised and unsupervised models at that finer level in terms of effort-aware performance measures. OBJECTIVE: To examine the performance of supervised and unsupervised prediction models in the context of fine-grained defect prediction in terms of effort-aware performance measures. METHOD: Experiments with a time-sensitive approach were conducted to evaluate the predictive performance of supervised and unsupervised methods proposed in past studies. Datasets from OSS projects with manually validated defect links were employed from a past study. RESULTS: The use of manually validated links led to low-performance results. No clear difference among supervised and unsupervised methods was found while CBS+, a supervised method, was the best method in terms of F-measure. Even CBS+ did not achieve reasonable performance. A non-linear learning algorithm did not help the performance improvement. CONCLUSION: No clear preference among unsupervised and supervised methods. CBS+ was the best method on average. The predictive performance was still a challenge.
背景:软件缺陷预测(SDP)是支持软件质量保证(SQA)活动的一个活跃的研究课题。可以观察到,在发布级和变更级缺陷预测中,非监督预测模型经常与监督预测模型竞争。细粒度的即时缺陷预测关注于变更中的缺陷文件,而不是整个变更。最近的一项研究表明,细粒度的及时缺陷预测在工作感知性能度量方面是具有成本效益的。这些研究并没有探索监督和非监督模型在努力意识绩效衡量方面的有效性。目的:从努力感知性能度量的角度,检验监督和非监督预测模型在细粒度缺陷预测背景下的性能。方法:采用时间敏感方法进行实验,以评估过去研究中提出的有监督和无监督方法的预测性能。从过去的研究中使用了带有手动验证缺陷链接的OSS项目的数据集。结果:使用手动验证链接导致低性能结果。有监督方法与无监督方法无明显差异,而有监督方法CBS+在F-measure上是最好的方法。即使CBS+也没有达到合理的表现。非线性学习算法无助于性能的提高。结论:无监督与有监督方法无明显的优劣性。CBS+平均来说是最好的方法。预测性能仍然是一个挑战。
{"title":"An Evaluation of Effort-Aware Fine-Grained Just-in-Time Defect Prediction Methods","authors":"S. Amasaki, Hirohisa Aman, Tomoyuki Yokogawa","doi":"10.1109/SEAA56994.2022.00040","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00040","url":null,"abstract":"CONTEXT: Software defect prediction (SDP) is an active research topic to support software quality assurance (SQA) activities. It was observed that unsupervised prediction models were often competitive with supervised ones at release-level and change-level defect prediction. Fine-grained just-in-time defect prediction focuses on defective files in a change, rather than the whole change. A recent study showed that the fine-grained just-in-time defect prediction was cost-effective in terms of effort-aware performance measures. Those studies did not explore the effectiveness of supervised and unsupervised models at that finer level in terms of effort-aware performance measures. OBJECTIVE: To examine the performance of supervised and unsupervised prediction models in the context of fine-grained defect prediction in terms of effort-aware performance measures. METHOD: Experiments with a time-sensitive approach were conducted to evaluate the predictive performance of supervised and unsupervised methods proposed in past studies. Datasets from OSS projects with manually validated defect links were employed from a past study. RESULTS: The use of manually validated links led to low-performance results. No clear difference among supervised and unsupervised methods was found while CBS+, a supervised method, was the best method in terms of F-measure. Even CBS+ did not achieve reasonable performance. A non-linear learning algorithm did not help the performance improvement. CONCLUSION: No clear preference among unsupervised and supervised methods. CBS+ was the best method on average. The predictive performance was still a challenge.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"67 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130707580","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Towards the Generation of Robust E2E Test Cases in Template-based Web Applications 基于模板的Web应用中健壮的端到端测试用例的生成
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00024
A. R. Fasolino, Porfirio Tramontana
Capture and Replay techniques provide a well-known solution for End-To-End (E2E) testing of Web applications. They allow a tester to generate test scripts without requiring advanced programming skills. For this reason, they are very popular in acceptance and regression testing activities. These techniques are affected by the issue of fragility of the produced test cases, which may break even if small changes are operated in the user interface, without modifications of the app functionality. To overcome this issue, several approaches for either generating robust test cases or automatically repairing broken test cases have been proposed. In this paper we propose an alternative solution that aims at improving the testability of Web applications for generating robust test cases. This solution applies to Web applications developed with template-based technologies. It is based on the template source code automatic injection of additional hook attributes and on the proposal of a new type of locators based on such hooks. These locators aid the unique retrieval of the user interface items involved in test cases. We validated our technique in the context of a continuous integration and delivery processes of template-based web applications that was developed from scratch. The study showed that the use of hook-based locators can improve the robustness of test cases generated by a Capture & Replay testing tool, introducing relevant savings in the regression test case repairing activity.
捕获和重放技术为Web应用程序的端到端(E2E)测试提供了一种众所周知的解决方案。它们允许测试人员生成测试脚本,而不需要高级编程技能。由于这个原因,它们在验收和回归测试活动中非常流行。这些技术受到产生的测试用例的脆弱性问题的影响,即使在不修改应用程序功能的情况下,在用户界面中操作的小更改也可能会中断。为了克服这个问题,已经提出了几种方法来生成健壮的测试用例或自动修复损坏的测试用例。在本文中,我们提出了一种替代解决方案,旨在提高Web应用程序的可测试性,从而生成健壮的测试用例。此解决方案适用于使用基于模板的技术开发的Web应用程序。它是基于模板源代码自动注入额外的钩子属性,并提出了一种基于这些钩子的新型定位器。这些定位器帮助对测试用例中涉及的用户界面项进行唯一的检索。我们在基于模板的web应用程序的持续集成和交付过程中验证了我们的技术,这些应用程序是从头开始开发的。研究表明,使用基于钩子的定位器可以提高捕获和重放测试工具生成的测试用例的鲁棒性,在回归测试用例修复活动中引入相关的节省。
{"title":"Towards the Generation of Robust E2E Test Cases in Template-based Web Applications","authors":"A. R. Fasolino, Porfirio Tramontana","doi":"10.1109/SEAA56994.2022.00024","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00024","url":null,"abstract":"Capture and Replay techniques provide a well-known solution for End-To-End (E2E) testing of Web applications. They allow a tester to generate test scripts without requiring advanced programming skills. For this reason, they are very popular in acceptance and regression testing activities. These techniques are affected by the issue of fragility of the produced test cases, which may break even if small changes are operated in the user interface, without modifications of the app functionality. To overcome this issue, several approaches for either generating robust test cases or automatically repairing broken test cases have been proposed. In this paper we propose an alternative solution that aims at improving the testability of Web applications for generating robust test cases. This solution applies to Web applications developed with template-based technologies. It is based on the template source code automatic injection of additional hook attributes and on the proposal of a new type of locators based on such hooks. These locators aid the unique retrieval of the user interface items involved in test cases. We validated our technique in the context of a continuous integration and delivery processes of template-based web applications that was developed from scratch. The study showed that the use of hook-based locators can improve the robustness of test cases generated by a Capture & Replay testing tool, introducing relevant savings in the regression test case repairing activity.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"345 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124260758","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
ScrumBut as an Indicator of Process Debt scrum作为过程债务的指标
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00057
Jacinto Ramirez Lahti, A. Tuovinen, T. Mikkonen, Rafael Capilla
Technical debt analysis is used to detect problems in a codebase. Most technical debt indicators rely on measuring the quality of the code, as developers tend to induce recurring technical debt that emerges along with evolution cycles. This debt can emerge when project pressure leads to process deviations, for instance. In agile methods like Scrum, such deviations are commonly known as ScrumButs (like Scrum but …), which can be considered as a form of process debt. In this paper, we investigate two recurring signs of process debt (i.e. code smells and anti-patterns) caused by Scrumbuts. Our contribution investigates typical ScrumBut practices found in agile projects in one company and we report the relationships found between problems in code and ScrumBut issues. Our findings identify three types of ScrumButs, their root causes, and how these relate to concrete code smells and anti-patterns.
技术债务分析用于检测代码库中的问题。大多数技术债务指示器依赖于测量代码的质量,因为开发人员倾向于诱导随着进化周期出现的重复技术债务。例如,当项目压力导致过程偏差时,这种债务就会出现。在像Scrum这样的敏捷方法中,这种偏差通常被称为scrumbut(像Scrum但是…),这可以被视为过程债务的一种形式。在本文中,我们研究了由scrum引起的过程债的两个反复出现的迹象(即代码异味和反模式)。我们的文章调查了在一家公司的敏捷项目中发现的典型的scrum实践,并报告了代码问题与scrum问题之间的关系。我们的发现确定了三种类型的scrum,它们的根本原因,以及它们与具体代码气味和反模式的关系。
{"title":"ScrumBut as an Indicator of Process Debt","authors":"Jacinto Ramirez Lahti, A. Tuovinen, T. Mikkonen, Rafael Capilla","doi":"10.1109/SEAA56994.2022.00057","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00057","url":null,"abstract":"Technical debt analysis is used to detect problems in a codebase. Most technical debt indicators rely on measuring the quality of the code, as developers tend to induce recurring technical debt that emerges along with evolution cycles. This debt can emerge when project pressure leads to process deviations, for instance. In agile methods like Scrum, such deviations are commonly known as ScrumButs (like Scrum but …), which can be considered as a form of process debt. In this paper, we investigate two recurring signs of process debt (i.e. code smells and anti-patterns) caused by Scrumbuts. Our contribution investigates typical ScrumBut practices found in agile projects in one company and we report the relationships found between problems in code and ScrumBut issues. Our findings identify three types of ScrumButs, their root causes, and how these relate to concrete code smells and anti-patterns.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"218 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122394850","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Negative Transfer in Cross Project Defect Prediction: Effect of Domain Divergence 跨项目缺陷预测中的负迁移:领域发散的影响
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00010
Osayande P. Omondiagbe, Sherlock A. Licorish, Stephen G. MacDonell
Cross-project defect prediction (CPDP) models are used in new software project prediction tasks to improve defect prediction rates. The development of these CPDP models could be challenging in cases where there is little or no historical data. For this reason, researchers may need to rely on multiple sources and use transfer learning-based CPDP for building defect prediction models. These data are typically taken from similar and related projects, but their distributions can be different from the new software project (target data). Although, transfer learning-based CPDP models are designed to handle these distribution differences, but if not correctly handled by the model, may lead to negative transfer. To this end, recent works have focused on building transfer CPDP models, but little is known about how similar or dissimilar sources should be to avoid negative transfer. This paper provides the first empirical investigation to understand the effect of combining different sources with different levels of similarities in transfer CPDP. We introduce the use of the Population Stability Index (PSI) to interpret whether the distribution of the combined or single-source data is similar to the target data. This was validated using an adversarial approach. Experimental results on three public datasets reveal that when the source and target distribution are very similar, the probability of false alarm is improved by 3% to 7% and the recall indicator is reduced from 1% to 8%. Interestingly, we also found that when dissimilar source data are combined with different source datasets, the overall domain divergence is lowered, and the performance is improved. The results highlight the importance of using the right source to aid the learning process.
跨项目缺陷预测(CPDP)模型用于新的软件项目预测任务,以提高缺陷预测率。在历史数据很少或没有历史数据的情况下,这些CPDP模型的开发可能具有挑战性。由于这个原因,研究人员可能需要依赖多种来源,并使用基于迁移学习的CPDP来构建缺陷预测模型。这些数据通常来自相似的和相关的项目,但是它们的分布可能不同于新的软件项目(目标数据)。虽然,基于迁移学习的CPDP模型是为了处理这些分布差异而设计的,但如果模型处理不当,可能会导致负迁移。为此,最近的工作集中在建立迁移CPDP模型上,但很少有人知道相似或不相似的来源应该如何避免负迁移。本文首次通过实证研究了解不同来源、不同相似度对迁移CPDP的影响。我们引入了使用人口稳定指数(PSI)来解释组合或单一来源数据的分布是否与目标数据相似。使用对抗性方法验证了这一点。在三个公开数据集上的实验结果表明,当源和目标分布非常相似时,误报概率提高3%至7%,召回率指标从1%降至8%。有趣的是,我们还发现,当不同的源数据与不同的源数据集结合时,整体的域散度降低,性能得到提高。结果强调了使用正确的资源来帮助学习过程的重要性。
{"title":"Negative Transfer in Cross Project Defect Prediction: Effect of Domain Divergence","authors":"Osayande P. Omondiagbe, Sherlock A. Licorish, Stephen G. MacDonell","doi":"10.1109/SEAA56994.2022.00010","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00010","url":null,"abstract":"Cross-project defect prediction (CPDP) models are used in new software project prediction tasks to improve defect prediction rates. The development of these CPDP models could be challenging in cases where there is little or no historical data. For this reason, researchers may need to rely on multiple sources and use transfer learning-based CPDP for building defect prediction models. These data are typically taken from similar and related projects, but their distributions can be different from the new software project (target data). Although, transfer learning-based CPDP models are designed to handle these distribution differences, but if not correctly handled by the model, may lead to negative transfer. To this end, recent works have focused on building transfer CPDP models, but little is known about how similar or dissimilar sources should be to avoid negative transfer. This paper provides the first empirical investigation to understand the effect of combining different sources with different levels of similarities in transfer CPDP. We introduce the use of the Population Stability Index (PSI) to interpret whether the distribution of the combined or single-source data is similar to the target data. This was validated using an adversarial approach. Experimental results on three public datasets reveal that when the source and target distribution are very similar, the probability of false alarm is improved by 3% to 7% and the recall indicator is reduced from 1% to 8%. Interestingly, we also found that when dissimilar source data are combined with different source datasets, the overall domain divergence is lowered, and the performance is improved. The results highlight the importance of using the right source to aid the learning process.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125052610","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Using COSMIC to measure functional size of software: a Systematic Literature Review 使用COSMIC测量软件的功能大小:一个系统的文献综述
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00042
Vincenzo Luigi Martino, C. Gravino
We present a systematic literature review performed to understand and summarize the application of COSMIC which is a functional size measurement (FSM) method, mainly applied for estimating software development effort. The results reveals that it is considered to be suitable for a broader range of application domains, e.g., Web applications, Mobile app. Furthermore, the review shows that a lot has been done also for automating the use of COSMIC as well as for rapidly and early applying the method through some approximations.
我们提出了一个系统的文献综述,以理解和总结COSMIC的应用,它是一种功能大小度量(FSM)方法,主要用于评估软件开发工作。结果表明,它被认为适用于更广泛的应用领域,例如Web应用程序,移动应用程序。此外,审查表明,对于COSMIC的自动化使用以及通过一些近似快速和早期应用该方法,已经做了很多工作。
{"title":"Using COSMIC to measure functional size of software: a Systematic Literature Review","authors":"Vincenzo Luigi Martino, C. Gravino","doi":"10.1109/SEAA56994.2022.00042","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00042","url":null,"abstract":"We present a systematic literature review performed to understand and summarize the application of COSMIC which is a functional size measurement (FSM) method, mainly applied for estimating software development effort. The results reveals that it is considered to be suitable for a broader range of application domains, e.g., Web applications, Mobile app. Furthermore, the review shows that a lot has been done also for automating the use of COSMIC as well as for rapidly and early applying the method through some approximations.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127911364","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Metamorphic Testing in Autonomous System Simulations 自主系统仿真中的变形测试
Pub Date : 2022-08-01 DOI: 10.1109/SEAA56994.2022.00059
Jubril Gbolahan Adigun, Linus Eisele, M. Felderer
Metamorphic testing has proven to be effective for test case generation and fault detection in many domains. It is a software testing strategy that uses certain relations between input-output pairs of a program, referred to as metamorphic relations. This approach is relevant in the autonomous systems domain since it helps in cases where the outcome of a given test input may be difficult to determine. In this paper therefore, we provide an overview of metamorphic testing as well as an implementation in the autonomous systems domain. We implement an obstacle detection and avoidance task in autonomous drones utilising the GNC API alongside a simulation in Gazebo. Particularly, we describe properties and best practices that are crucial for the development of effective metamorphic relations. We also demonstrate two metamorphic relations for metamorphic testing of single and more than one drones, respectively. Our relations reveal several properties and some weak spots of both the implementation and the avoidance algorithm in the light of metamorphic testing. The results indicate that metamorphic testing has great potential in the autonomous systems domain and should be considered for quality assurance in this field.
在许多领域,变形测试已被证明是有效的测试用例生成和故障检测方法。它是一种软件测试策略,使用程序的输入输出对之间的某些关系,称为变形关系。这种方法与自治系统领域相关,因为它有助于在给定测试输入的结果可能难以确定的情况下。因此,在本文中,我们提供了变形测试的概述以及在自治系统领域中的实现。我们利用GNC API在Gazebo中进行模拟,在自主无人机中实现障碍物检测和回避任务。特别是,我们描述了对有效变质关系的发展至关重要的性质和最佳实践。我们还分别证明了单无人机和多无人机的变质检验的两个变质关系。我们的关系揭示了实现和回避算法在变形测试中的一些特性和一些弱点。结果表明,变质测试在自治系统领域具有很大的潜力,应作为该领域的质量保证手段加以考虑。
{"title":"Metamorphic Testing in Autonomous System Simulations","authors":"Jubril Gbolahan Adigun, Linus Eisele, M. Felderer","doi":"10.1109/SEAA56994.2022.00059","DOIUrl":"https://doi.org/10.1109/SEAA56994.2022.00059","url":null,"abstract":"Metamorphic testing has proven to be effective for test case generation and fault detection in many domains. It is a software testing strategy that uses certain relations between input-output pairs of a program, referred to as metamorphic relations. This approach is relevant in the autonomous systems domain since it helps in cases where the outcome of a given test input may be difficult to determine. In this paper therefore, we provide an overview of metamorphic testing as well as an implementation in the autonomous systems domain. We implement an obstacle detection and avoidance task in autonomous drones utilising the GNC API alongside a simulation in Gazebo. Particularly, we describe properties and best practices that are crucial for the development of effective metamorphic relations. We also demonstrate two metamorphic relations for metamorphic testing of single and more than one drones, respectively. Our relations reveal several properties and some weak spots of both the implementation and the avoidance algorithm in the light of metamorphic testing. The results indicate that metamorphic testing has great potential in the autonomous systems domain and should be considered for quality assurance in this field.","PeriodicalId":269970,"journal":{"name":"2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121488762","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
期刊
2022 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1